Out of curiosity, does the signup server taint check the username, i.e. does it check if it's alphanumeric? Rick Dailey ColusaNET <mailto:%2F%2Frdailey at colusanet.com>rdailey at colusanet.com